Enhancing an integrated end-of-purpose protocol with purpose information
Abstract
The present disclosure involves systems, software, and computer implemented methods for integrated data privacy services. An example method includes determining to initiate an integrated end of purpose protocol for an object of an object type. Target applications are determined that are allowed to process objects of the object type for at least one purpose, based on identified purpose information. An end-of-purpose query is provided to the target applications and an end-of-purpose status is received from each target application that indicates whether the application is able to block the object. The received statuses are evaluated to determine whether an aligned end of purpose has been reached for the object. In response to determining that the aligned end of purpose has been reached for the object, a block command is provided to each of the multiple applications that instructs a respective application to locally block the object.
Claims
exact text as granted — not AI-modifiedWhat is claimed is:
1. A computer-implemented method comprising:
determining, in a multiple-application landscape that includes multiple applications, to initiate an integrated end of purpose protocol for an object of an object type;
identifying purpose information that indicates for which purposes respective applications are allowed to process objects in the multiple-application landscape;
determining as target applications for an end-of-purpose query and based on the purpose information, applications that are allowed to process objects of the object type for at least one purpose;
providing, to each of the target applications of the end-of-purpose query, the end-of-purpose query that requests each of the target applications to determine whether the target application is able to block the object;
receiving, as received end-of-purpose statuses, in response to the end-of-purpose query, an end-of-purpose status from each respective target application of the target applications that indicates whether the respective target application is able to block the object;
evaluating the received end-of-purpose statuses to determine whether an aligned end of purpose has been reached for the object in the multiple-application landscape; and
in response to determining that the aligned end of purpose has been reached for the object in the multiple-application landscape, providing, to each of the multiple applications, a block command that instructs a respective application to locally block the object in the respective application.
2. The computer-implemented method of claim 1 , further comprising:
evaluating the received end-of-purpose statuses and the purpose information; and
updating the purpose information, based on the received end-of-purpose statuses, to create updated purpose information for at least some of the target applications.
3. The computer-implemented method of claim 2 , wherein updating the purpose information comprises removing a first purpose assignment for a first purpose from a first application in response to determining that no application is processing the object for the first purpose.
4. The computer-implemented method of claim 3 , wherein an aligned end-of-purpose has not been reached for the object and the method further comprises determining that the first application has no purposes assigned to the object.
5. The computer-implemented method of claim 4 , further comprising, based on determining that the first application has no purposes assigned to the object, sending a block command for the object to the first application instructing the first application to block the object.
6. The computer-implemented method of claim 1 , wherein the target applications do not include a first application based on the first application not having any purposes assigned to the object and wherein the end-of-purpose query is not sent to the first application.
7. The computer-implemented method of claim 1 , wherein evaluating the received end-of-purpose statuses comprises determining whether each end-of-purpose status indicates end of purpose for the object.
8. The computer-implemented method of claim 1 , further comprising receiving a block status from each respective target application that indicates a success or failure of processing the block command in the respective target application.
9. The computer-implemented method of claim 1 , wherein a first end-of-purpose status includes an end-of-purpose time for the object for a first target application.
10. The computer-implemented method of claim 9 , further comprising determining that the first target application has reached end of purpose for the object based on determining that the end-of-purpose time is a historical time.
11. The computer-implemented method of claim 9 , further comprising determining that the first target application has not reached end of purpose for the object based on determining that the end-of-purpose time is a future time.
12. The computer-implemented method of claim 1 , wherein applications that do not process objects of the object type are not included in the target applications.
13. A system comprising:
an integrated end of purpose handler;
multiple applications included in a multiple-application landscape;
wherein the integrated end of purpose handler is configured to:
determine to initiate an integrated end of purpose protocol for an object of an object type;
identify purpose information that indicates for which purposes respective applications are allowed to process objects in the multiple-application landscape;
determine as target applications for an end-of-purpose query and based on the purpose information, applications that are allowed to process objects of the object type for at least one purpose;
provide, to each of the target applications of the end-of-purpose query, the end-of-purpose query that requests each of the target applications to determine whether the target application is able to block the object;
receive, as received end-of-purpose statuses, in response to the end-of-purpose query, an end-of-purpose status from each respective target application of the target applications that indicates whether the respective target application is able to block the object;
evaluate the received end-of-purpose statuses to determine whether an aligned end of purpose has been reached for the object in the multiple-application landscape; and
in response to determining that the aligned end of purpose has been reached for the object in the multiple-application landscape, provide, to each of the multiple applications, a block command that instructs a respective application to locally block the object in the respective application.
14. The system of claim 13 , wherein the integrated end of purpose handler is further configured to:
evaluate the received end-of-purpose statuses and the purpose information; and
update the purpose information, based on the received end-of-purpose statuses, to create updated purpose information for at least some of the target applications.
15. The system of claim 14 , wherein updating the purpose information comprises removing a first purpose assignment for a first purpose from a first application in response to determining that no application is processing the object for the first purpose.
16. The system of claim 15 , wherein an aligned end-of-purpose has not been reached for the object and the integrated end of purpose handler is further configured to determine that the first application has no purposes assigned to the object.
17. A non-transitory, computer-readable medium coupled to one or more processors and having instructions stored thereon which, when executed by the one or more processors, cause the one or more processors to perform operations, the operations comprising:
determining, in a multiple-application landscape that includes multiple applications, to initiate an integrated end of purpose protocol for an object of an object type;
identifying purpose information that indicates for which purposes respective applications are allowed to process objects in the multiple-application landscape;
determining as target applications for an end-of-purpose query and based on the purpose information, applications that are allowed to process objects of the object type for at least one purpose;
providing, to each of the target applications of the end-of-purpose query, the end-of-purpose query that requests each of the target applications to determine whether the target application is able to block the object;
receiving, as received end-of-purpose statuses, in response to the end-of-purpose query, an end-of-purpose status from each respective target application of the target applications that indicates whether the respective target application is able to block the object;
evaluating the received end-of-purpose statuses to determine whether an aligned end of purpose has been reached for the object in the multiple-application landscape; and
in response to determining that the aligned end of purpose has been reached for the object in the multiple-application landscape, providing, to each of the multiple applications, a block command that instructs a respective application to locally block the object in the respective application.
18. The computer-readable medium of claim 17 , wherein the operations further comprise:
evaluating the received end-of-purpose statuses and the purpose information; and
updating the purpose information, based on the received end-of-purpose statuses, to create updated purpose information for at least some of the target applications.
19. The computer-readable medium of claim 18 , wherein updating the purpose information comprises removing a first purpose assignment for a first purpose from a first application in response to determining that no application is processing the object for the first purpose.
20. The computer-readable medium of claim 19 , wherein an aligned end-of-purpose has not been reached for the object and the operations further comprise determining that the first application has no purposes assigned to the object.Cited by (0)
No later patents cite this yet.
References (0)
No backward citations on record.